Ensuring fairness to the Data Subject. 7.1. In addition to having a lawful basis for sharing information, the DPA generally requires that the sharing must be fair. In order to achieve fairness to the Data Subjects, the Parties will put in place the following arrangements:
7.1.1. amendment of internal guidance to improve awareness and understanding among Personnel;
7.1.2. amendment of privacy notices and policies; and
7.1.3. consideration given to further activities to promote public understanding where appropriate.
7.2. Each Party shall procure that its notification to the Information Commissioner’s Office reflects the flows of information under this Agreement.
7.3. Further provision in relation to specific data flows is included in the attached Personal Data Agreement.
Ensuring fairness to the Data Subject. In addition to having a lawful basis for sharing information, the UK GDPR generally requires that the sharing must be fair and transparent. In order to achieve fairness and transparency to the Data Subjects, the Parties will take the following measures:
Ensuring fairness to the Data Subject. 7.1. In addition to having a lawful basis for sharing information, the UK GDPR generally requires that the sharing must be fair and transparent. In order to achieve fairness and transparency to the Data Subjects, the Parties will take the following measures:
7.1.1. amendment of internal guidance to improve awareness and understanding among personnel;
7.1.2. amendment of respective privacy notices and policies to reflect the processing of data carried out further to this Agreement, including covering the requirements of articles 13 and 14 UK GDPR and providing these (or making them available to) Data Subjects;
7.1.3. ensuring that information and communications relating to the processing of data is easily accessible and easy to understand, and that clear and plain language be used; and
7.1.4. giving consideration to carrying out activities to promote public understanding of how data is processed where appropriate.
7.2. Each Party shall procure that its notification to the Information Commissioner’s Office and record of processing maintained for the purposes of Article 30 UK GDPR reflects the flows of information under this Agreement.
7.3. Each Party shall reasonably cooperate with the other in undertaking any Data Protection Impact Assessment associated with the processing of data further to this Agreement, , and in doing so engage with their respective Data Protection Officers in the performance by them of their duties pursuant to Article 39 UK GDPR.
7.4. Further provision in relation to specific data flows is included in the Personal Data Agreement annexed to this Schedule.
Ensuring fairness to the Data Subject. 7.1. In addition to having a lawful basis for sharing information, the GDPR generally requires that the sharing must be fair. In order to achieve fairness to the Data Subjects, the Parties will put in place the following arrangements:
7.1.1. amendment of internal guidance to improve awareness and understanding among Personnel;
7.1.2. amendment of respective privacy notices and policies to reflect the processing of data carried out further to this agreement, including covering the requirements of articles 13 and 14 GDPR and providing these (or making them available to) Data Subjects; and
7.1.3. consideration given to further activities to promote public understanding where appropriate.
7.2. Each Party shall procure that its notification to the Information Commissioner’s Office and record of processing maintained for the purposes of Article 30 GDPR reflects the flows of information under this Agreement.
7.3. Each Party shall reasonably cooperate with the other in undertaking any Data Protection Impact Assessment associated with the processing of data further to this Agreement.
7.4. Further provision in relation to specific data flows is included in the attached Personal Data Agreement.
Ensuring fairness to the Data Subject. 6.1. In addition to having a lawful basis for sharing information, the UK GDPR generally requires that the sharing must be fair and transparent. In order to achieve fairness and transparency to the Data Subjects, the Partners will take the following measures as reasonably required:
6.1.1. amendment of internal guidance to improve awareness and understanding among Staff;
6.1.2. amendment of respective privacy notices and policies to reflect the processing of data carried out further to this Agreement, including covering the requirements of articles 13 and 14 UK GDPR and providing these (or making them available to) Data Subjects;
6.1.3. ensuring that information and communications relating to the processing of data is clear and easily accessible; and
6.1.4. giving consideration to carrying out activities to promote public understanding of how data is processed where appropriate.
6.2. Each Partner shall procure that its notification to the Information Commissioner’s Office, and record of processing maintained for the purposes of Article 30 UK GDPR, reflects the flows of information under this Agreement.
6.3. The Partners shall reasonably cooperate in undertaking any DPIA associated with the processing of data further to this Agreement, and in doing so engage with their respective Data Protection Officers in the performance by them of their duties pursuant to Article 39 UK GDPR.
6.4. Further provision in relation to specific data flows may be included in a Personal Data Agreement between the Partners.
Ensuring fairness to the Data Subject. 7.1. In addition to having a lawful basis for sharing information, the GDPR generally requires that the sharing must be fair and transparent. In order to achieve fairness and transparency to the Data Subjects, the Parties will put in place the following arrangements:
7.1.1. amendment of internal guidance to improve awareness and understanding among Personnel;
7.1.2. amendment of privacy notices and policies; and
7.1.3. consideration given to further activities to promote public understanding where appropriate.
7.2. Each Party shall procure that its notification to the Information Commissioner’s Office reflects the flows of information under this Agreement.
7.3. Further provision in relation to specific data flows is included in the attached Personal Data Agreement.
Ensuring fairness to the Data Subject. In addition to having a lawful basis for sharing information, the General Data Protection Regulations requires that the sharing must be fair. In order to achieve fairness to the Data Subjects, the Parties will ensure that all candidates are aware that their information will be shared by both the NHS Confederation and the Employers. NHS Confederation, as Lead Controller, shall be responsible for providing clear and sufficient information to the Data Subjects, in accordance with the Data Protection Legislation, detailing the purposes for which the Parties will Process their Shared Personal Data under this Agreement, the legal basis for such purposes and such other information as is required by Articles 13 and 14 of the UK GDPR (“Fair Processing Information”) including: if Shared Personal Data will be transferred to a Third Party, that fact and sufficient information about such transfer and the purpose of such transfer to enable the Data Subject to understand the purpose and risks of such transfer; and if Shared Personal Data will be transferred outside the EEA pursuant to this Agreement, that fact and sufficient information about such transfer, the purpose of such transfer and the safeguards put in place by the controller to enable the Data Subject to understand the purpose and risks of such transfer. Where data is not collected from the subject, the Parties’ online privacy notices will provide the vehicle for informing subjects. The parties will collaborate to ensure that these notices are consistent and reference each other. This Agreement helps to ensure fairness by ensuring there are parameters to the sharing of the information and documenting the information governance procedures that the Parties have in place.
Ensuring fairness to the Data Subject. In addition to having a lawful basis for sharing information, the General Data Protection Regulations requires that the sharing must be fair. In order to achieve fairness to the Data Subjects, the Parties will ensure that all candidates are aware that their information will be shared by both the NHS Confederation and the Employers. The Parties will collaborate to ensure that appropriate privacy information is provided to subjects. They will ensure that the information is provided in a concise, transparent, intelligible and easily accessible form. Where data is not collected from the subject, the Parties’ online privacy notices will provide the vehicle for informing subjects. The parties will collaborate to ensure that these notices are consistent and reference each other. Where the Parties establish systems that collect personal data directly from subjects, they will collaborate to make sure that compliant privacy information is presented at the point of contact. This Agreement helps to ensure fairness by ensuring there are parameters to the sharing of the information and documenting the information governance procedures that the Parties have in place.
Ensuring fairness to the Data Subject. In addition to having a lawful basis for sharing information, the UK GDPR generally requires that the sharing must be fair and transparent. In order to achieve fairness and transparency to the Data Subjects, the Parties will take the following measures as reasonably required: amendment of internal guidance to improve awareness and understanding among Staff, amendment of respective privacy notices and policies to reflect the processing of data carried out further to this Agreement, including covering the requirements of articles 13 and 14 UK GDPR and providing these (or making them available to) Data Subjects, ensuring that information and communications relating to the processing of data is clear and easily accessible, and giving consideration to carrying out activities to promote public understanding of how data is processed where appropriate. Each Party shall procure that its notification to the Information Commissioner’s Office, and record of processing maintained for the purposes of Article 30 UK GDPR, reflects the flows of information under this Agreement. The Parties shall reasonably co-operate in undertaking any DPIA associated with the processing of data further to this Agreement, and in doing so engage with their respective Data Protection Officers in the performance by them of their duties pursuant to Article 39 UK GDPR. Further provision in relation to specific data flows may be included in a Personal Data Agreement between the Parties. The Parties must take reasonable steps to ensure the suitability, reliability, training and competence, of any Staff who have access to Personal Data, and Special Category Personal Data, including ensuring reasonable background checks and evidence of completeness are available on request. The Parties agree to treat all Relevant Information as confidential and imparted in confidence and must safeguard it accordingly. Where any of the Parties’ Staff are not healthcare professionals (for the purposes of the Data Protection Act 2018), the employing Parties must procure that Staff operate under a duty of confidentiality which is equivalent to that which would arise if that person were a healthcare professional. The Parties shall ensure that all Staff required to access Personal Data (including Special Category Personal Data) are informed of the confidential nature of the Personal Data. The Parties shall include appropriate confidentiality clauses in employment/service contracts of all Staff that have any access whatso...
